CVE-2025-60730: Incomplete Cleanup

PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...

EUVD-2025-10979

Malicious code in bioql PyPI...

CVE-2025-29421: Improper Access Control

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...

CVE-2025-29280

Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field of the backend system settings interface allows an attacker to insert and execute arbitrary malicious code...

Design/Logic Flaw

Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file...